UnitedHealth’s healthtech company, Change Healthcare, which lost sensitive data of over 100 million people in a 2024 ransomware attack, has finished notifying most of the affected individuals. However, the firm has been accused of hiding its breach notice page from search engines, delaying public disclosure and causing legal action against it for security failings. The breach was the largest known theft of medical data in the US.
OCR Announces Proposed Updates to HIPAA Security Rule, Raises the Bar for Healthcare Cybersecurity
The Office for Civil Rights (OCR) has proposed updates to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, seeking to enhance cybersecurity in
